Comment 7 for bug 28123

Message-Id: <email address hidden>
Date: Sat, 7 Jan 2006 13:31:02 +0100
From: Adrian von Bidder <email address hidden>
To: <email address hidden>
Cc: <email address hidden>, <email address hidden>,
 <email address hidden>, <email address hidden>, <email address hidden>
Subject: md5sum shouldn't be able to disappear

--nextPart16015641.e8x9N9unh8
Content-Type: text/plain;
  charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

severity 315784 serious
thanks

With packages ranging from woody to experimental (majority is sarge), and=20
upgrading apt, dpkg and some others to etch, I got into the situation that=
=20
no md5sum commmand was on the system. I feel dependencies should be able=20
to avoid that situation.

Should dpkg Pre-Depend on coreutils >=3D 5.93-5 or what?

Below is some IRC conversation that convinced me that this is RC. =20
(deboostrap cc:d on request of mrvn)

cheers
=2D- vbi

>>>>>>>
<cmot> very, very stupid Q (probably) - why is there no /usr/bin/md5sum on=
=20
my system? Isn't that a command that I should be able to expect on my=20
system?
<cmot> (coreutils has /usr/bin/md5sum.textutils - shouldn't there be a=20
symlink or whatever?)
<noshadow> cmot: which release? in sarge it should be in the dpkg package
<godog> cmot: indeed /usr/bin/md5sum here is owned by coreutils
<cmot> Hmmm. I have some mix with files from woody to experimental.
<cmot> I recently upgraded apt, dpkg & co to etch, so I guess that's the=20
problem.
<cmot> Yep. coreutils from sarge, dpkg from etch.
<cmot> Should this be a bug?
<vorlon> probably. if possible, something should have a depends: or a=20
conflicts: that prevents you from getting your system into that state.
<asuffield> md5sum is Essential, it's definitely a bug of some kind
<asuffield> you're not supposed to *ever* lose those
<noshadow> though it's better to err on this side than to make upgrade path=
s=20
impossible
<cmot> Hmm. coreutils/testing doesn't have /usr/bin/md5sum either, it seem=
s=20
to me?
<godog> etch's coreutils can also check /usr/bin/md5sum and symlink=20
appropriately
<asuffield> godog: that's postinst. Essential packages have to work without=
=20
being configured
<godog> asuffield: right, thanks for spotting that
<godog> cmot: coreutils 5.2.1-2.1 ?
<cmot> 5.2.1-2
<asuffield> why on earth did it get removed from dpkg? that's the problem=20
right there
<noshadow> asuffield: in what sense "essential"?
<cmot> But I just upgraded to 5.2.1-2.1 and it's only md5sum.textutils,=20
still.
<cmot> #289369, btw
<godog> noshadow: as in "Essential: yes" I think
<asuffield> grep-available -FPackage -sPackage,Essential coreutils
<asuffield> Package: coreutils
<asuffield> Essential: yes
<asuffield> it's a fairly simple and stupid problem, dpkg should not have=20
dropped md5sum until coreutils had released with it
<vorlon> or it should pre-depend on the new version
<asuffield> hmm, I suppose that would work, but it's kinda icky
<asuffield> I'd have been more inclined to do it with Replaces
<vorlon> nah, pre-depends are de rigueur in essential packages
<asuffield> anyway, somebody go file a bug about it
<asuffield> that one's RC
<cmot> And #313258
<cmot> One is minor, one is wishlist. I'll merge the two and upgrade to -=
=20
what? serious?
<godog> we should define bts arithmetics :)
<cmot> Hmm. Before I do that - anybody looked at coreutils/unstable?
<cmot> godog: :-)
<godog> 5.93-5 has /usr/bin/md5sum
<cmot> Ah. So dpkg just pre-depend on the new coreutils?
<cmot> I'll file a serious bug on dpkg, then (if there isn't one already;=20
haven't looked yet).
<mrvn> cmot: that would suck because it breaks (c)debootstrap
<mrvn> asuffield: replaces only works with a versioned conflicts
<cmot> mrvn: Hmm. I'll file anyway, but I'll include that remark.
<cmot> md5sum got to be there...
<mrvn> dpkg should just move it to /usr/lib/dpkg till after etch. :)
<mrvn> cmot: can you Debugs-CC the (c)debootstrap packages lists?
<cmot> mrvn: sure, which list is that?
<mrvn> cmot: something like <package>@packages.debian.org isn't it?
<cmot> The @packages.d.o ones?
<cmot> Will do.
<mrvn> thanks.
<cmot> And coreutils@packages, too.
<mrvn> can't hurt
<cmot> Hmmm. dpkg already has #315784, so I guess I'll just upgrade that=20
one.
<<<<<<<

=2D-=20
She liked him; he was a man of many qualities, even if most of them were=20
bad.

--nextPart16015641.e8x9N9unh8
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: get my key from http://fortytwo.ch/gpg/92082481

iKcEABECAGcFAkO/tIhgGmh0dHA6Ly9mb3J0eXR3by5jaC9sZWdhbC9ncGcvZW1h
aWwuMjAwMjA4MjI/dmVyc2lvbj0xLjUmbWQ1c3VtPTVkZmY4NjhkMTE4NDMyNzYw
NzFiMjVlYjcwMDZkYTNlAAoJEIukMYvlp/fWBSQAn0nTPpELMQj3NK65iFxfasbS
mNYxAKC8n7xYoSKe84xXRjCYce6B5iYeKg==
=NLK8
-----END PGP SIGNATURE-----

--nextPart16015641.e8x9N9unh8--